[Git][security-tracker-team/security-tracker][master] new openimageio issues
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Fri Jan 24 13:22:23 GMT 2025
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b7fd6a26 by Moritz Muehlenhoff at 2025-01-24T14:22:13+01:00
new openimageio issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -20,13 +20,21 @@ CVE-2024-57326 (A Reflected Cross-Site Scripting (XSS) vulnerability exists in t
CVE-2024-55573 (An issue was discovered in Centreon centreon-web 24.10.x before 24.10. ...)
- centreon-web <itp> (bug #913903)
CVE-2024-55195 (An allocation-size-too-big bug in the component /imagebuf.cpp of OpenI ...)
- TODO: check
+ - openimageio <unfixed>
+ NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4553
+ NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/78927acce09bd4fd7d4d7dccf7b7d4eff4295fcf
CVE-2024-55194 (OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via ...)
- TODO: check
+ - openimageio <unfixed>
+ NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4552
+ NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/34b29f33217e58b7f0d42c059ecf1696c381322a
CVE-2024-55193 (OpenImageIO v3.1.0.0dev was discovered to contain a segmentation viola ...)
- TODO: check
+ - openimageio <unfixed>
+ NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4551
+ NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/d2077eb22a821d0ef7614d06cc1540b952d37ddf
CVE-2024-55192 (OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via ...)
- TODO: check
+ - openimageio <unfixed>
+ NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4550
+ NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/57de4554d119a9adab8ef5c51ff7841fb6f97041
CVE-2024-53923 (An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04. ...)
- centreon-web <itp> (bug #913903)
CVE-2024-53588 (A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to ex ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7fd6a26dc2034b5c5b82fb9511b9b653d93ff9e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7fd6a26dc2034b5c5b82fb9511b9b653d93ff9e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250124/8196bd12/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list